a9362abacf731d794e89fd78a5a0c47e68713c180319cbb9d8a6042bbaa95100 | Triage

Sharing

General

Target

d8cdfdcc92477b552ebd53675df5b8c9261028fb.exe
Size

3.8MB
Sample

230212-swbpcaeh39
MD5

76142ae6bc689eb649429cdac475a0fc
SHA1

d8cdfdcc92477b552ebd53675df5b8c9261028fb
SHA256

a9362abacf731d794e89fd78a5a0c47e68713c180319cbb9d8a6042bbaa95100
SHA512

3255a36f76403700af979ddf07d950a6f1496f071fb2a13adfb7627961dafd0d43df3fb425bb68a10ad2ad32192b2bb5e4699de56086f9902992005c798da453
SSDEEP

49152:Wx211wH2PLA5SSRLRG/nMPEZEHyTM7wdOYv:e2EH2Db67wAy

Score

7^/10

Malware Config

Targets

- Target
  
  d8cdfdcc92477b552ebd53675df5b8c9261028fb.exe
- Size
  
  3.8MB
- MD5
  
  76142ae6bc689eb649429cdac475a0fc
- SHA1
  
  d8cdfdcc92477b552ebd53675df5b8c9261028fb
- SHA256
  
  a9362abacf731d794e89fd78a5a0c47e68713c180319cbb9d8a6042bbaa95100
- SHA512
  
  3255a36f76403700af979ddf07d950a6f1496f071fb2a13adfb7627961dafd0d43df3fb425bb68a10ad2ad32192b2bb5e4699de56086f9902992005c798da453
- SSDEEP
  
  49152:Wx211wH2PLA5SSRLRG/nMPEZEHyTM7wdOYv:e2EH2Db67wAy
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2